what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from Ivan Speziale

Huawei Weak Password Encryption

Posted Nov 13, 2012

Authored by Roberto Paleari, Ivan Speziale

Various Huawei products use DES without any salt to encrypt passwords. Included vulnerable are the Huawei Quidway series and Huawei CX600.

tags | advisory

SHA-256 | 586945a98792e4b79e4cdf79efe5861cf28ea94190070c0a2759e3c7de8f3a24

Download | Favorite | View

Ezylog Photovoltaic Management SQL Injection / Command Injection

Posted Sep 11, 2012

Authored by Roberto Paleari, Ivan Speziale

Ezylog Photovoltaic Management Server suffers from remote SQL injection, broken session management, hard-coded credential, and command injection vulnerabilities. The vendor has ignored the researcher.

tags | exploit, remote, vulnerability, sql injection

SHA-256 | c08de71fe982a59f6dfe14d76d8893338a491e1cf4c84021950bc3a71f354cac

Download | Favorite | View